EUVD-2012-3318

Malware in sbrugna...

EUVD-2012-3315

Malware in sbrugna...

EUVD-2012-3319

Malware in sbrugna...

EUVD-2013-0501

Malware in sbrugna...

EUVD-2012-3314

Malware in sbrugna...

EUVD-2012-3316

Malware in sbrugna...

EUVD-2012-3287

Malware in sbrugna...

EUVD-2012-3290

Malware in sbrugna...

Security Bulletin: IBM InfoSphere Guardium System x/Flex Systems appliances are affected by vulnerabilities in OpenSSL (CVE-2014-0076, CVE-2014-0160)

Abstract Security vulnerabilities have been discovered in OpenSSL. Content VULNERABILITY DETAILS: CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this...

Security Bulletin: IBM InfoSphere Guardium Database Activity Monitoring is affected by vulnerabilities in OpenSSL (CVE-2014-0076, CVE-2014-0160)

Abstract Security vulnerabilities have been discovered in OpenSSL that affect a 3rd party Component used by IBM InfoSphere Guardium. Content VULNERABILITY DETAILS: CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the...

Security Bulletin: Vulnerability in IBM InfoSphere Guardium Database Activity Monitoring (CVE-2010-2273)

Abstract Guardium Database Activity Monitoring is affected by multiple cross-site scripting XSS vulnerabilities in Dojo which could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Content VULNERABILITY DETAILS: CVE ID: CVE-2010-2273 CVSS: CVSS Base Score: 4....

Security Bulletin: Sensitive Data Disclosure Vulnerability in IBM Infosphere Guardium (CVE-2012-3312)

Abstract Security Bulletin: Sensitive Data Disclosure Vulnerability in IBM Infosphere Guardium CVE-2012-3312 Content SUMMARY: Datasource definition editor sends password in clear text. VULNERABILITY DETAILS: CVE ID: CVE-2012-3312 DESCRIPTION: The datasource definition editor, login and password f...

Security Bulletin: CSRF vulnerability in IBM Infosphere Guardium (CVE-2012-3309)

Abstract Security Bulletin: CSRF vulnerability in IBM Infosphere Guardium CVE-2012-3309 Content SUMMARY: Account creation panel is susceptible to cross site request forgery. VULNERABILITY DETAILS: CVE ID: CVE-2012-3309 DESCRIPTION: Account creation panel is susceptible to cross site request forge...

CVE-2012-3341

Vulnerability summary (CVE-2012-3341) : IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is affected by cross-site scripting due to improper validation of user-supplied input. A remote attacker could lure a victim to click a specially-crafted URL, causing script execution in the browser within the...

PT-2020-7215

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.0 through 8.2 Description The issue allows a remote attacker to bypass security restrictions due to improper restrictions on the create new user account functionality. This could be exploited to create...

PT-2020-7217

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 7.0 through 8.2 Description The issue is caused by improper validation of user-supplied input, leading to cross-site scripting. A remote attacker could exploit this using a specially-crafted URL to execute scri...

PT-2020-7216

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.0 through 8.2 Description The issue is caused by improper validation of user-supplied input, leading to XML external entity injection. A remote authenticated attacker could exploit this to obtain sensitive...

PT-2020-7213

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.0 through 8.2 Description The issue allows a remote authenticated attacker to send specially-crafted SQL statements to multiple scripts. This could enable the attacker to view, add, modify, or delete...

PT-2020-7214

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Guardium versions 8.0 through 8.2 Description The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing "dot dot" sequences /../ to download arbitrary files on...

CVE-2012-3340: Improper Restriction of Recursive Entity References in DTDs

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291...